Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fvwj-j79q-57v7

Опубликовано: 21 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.9

Описание

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

EPSS

Процентиль: 2%
0.00115
Низкий

3.9 Low

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 3.9
ubuntu
12 дней назад

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

CVSS3: 3.9
redhat
12 дней назад

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

CVSS3: 3.9
nvd
12 дней назад

A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment variables and causing unintended shell behavior.

msrc
8 дней назад

Libssh: libssh: information disclosure via proxycommand %r username expansion

CVSS3: 3.9
debian
12 дней назад

A flaw was found in libssh. A malicious username expanded through %r i ...

EPSS

Процентиль: 2%
0.00115
Низкий

3.9 Low

CVSS3

Дефекты

CWE-77